Privacy and security aren't just features. They're fundamental requirements for any platform that touches client data. This page sets out where Divii's data lives, how it is protected, and exactly how AI is and is not involved in your work.
Divii operates on Google Cloud Platform using Firebase services, fully cloud-hosted with no reliance on on-premise servers. Primary production data is hosted within Canadian Google Cloud data centres, supporting compliance with PIPEDA and relevant provincial privacy frameworks. Cloud infrastructure provides redundancy across Canadian regions.
All communications between users and the Divii platform are secured using HTTPS with Transport Layer Security (TLS) encryption. Data stored within Divii's databases is encrypted at rest within Google Cloud infrastructure, and backup data and system snapshots are similarly encrypted and subject to controlled access permissions.
Authentication for platform users is managed through Firebase Authentication, with granular security rules controlling access by user role. Access to internal systems and production environments is restricted to authorized personnel, and administrative access requires multi-factor authentication. Automated backups and database recovery capabilities protect against data loss.
The underlying Google Cloud infrastructure is certified against ISO 27001 information security management standards and SOC 1, SOC 2, and SOC 3 audit frameworks, with controls designed to support GDPR compliance, and built-in protections against common vulnerabilities including SQL injection and cross-site scripting.
Agreement sections, clause structures, and conditional logic are hard-coded within the platform and assembled using structured software logic. Divii's core agreement engine is deterministic and logic-based rather than AI-generated. Identical inputs produce identical output.
Artificial intelligence functionality is available only as an optional drafting assistance tool. AI features are not automatically engaged during the drafting process, and users may complete the entire drafting process without invoking AI. When the optional tool is used, generated text appears in a separate drafting interface rather than being automatically inserted; the clause must be reviewed, edited, and intentionally inserted by the user. AI outputs should be understood as draft suggestions rather than final legal work product.
Confidentiality in AI use. AI features operate through secure API integrations. Submitted data is not used to train public AI models, and AI systems do not have independent access to Divii accounts or stored documents.
Divii is designed to help lawyers remain competent in the use of technology and supervise technology-assisted work. The platform does not provide legal advice, assess fairness, or create solicitor-client relationships. Lawyers retain full editorial control and remain responsible for reviewing and approving all documents generated using the platform.
Divii operates solely as a software provider. The platform does not sell, mine, or use customer data for advertising or model training purposes, and users retain ownership and control of their content.
Ask us directly. We would rather answer the hard question before you sign up than after.